US 2020/0092165 A1 · Honeypot asset cloning

Abstract

Approaches provide for a management component to manage distribution of configuration information or other information in a network environment. For example, a request to deploy a security appliance configured to replicate functionality, behavior, and/or an identity of a computing device is received. The request includes selection criteria specifying one or more computing devices to replicate. Using the selection criteria, a computing device is identified as well as information associated with the computing device. The identified information is modified based on configuration requirements for a security appliance. The modified information is used to generate configuration information which is used to perform one of a number of actions, including, for example, configuring the security appliance or generating a new security appliance, among other such actions, where at least a portion of the operating behavior, functionality, or identification information of the security appliance substantially matches that of the identified computing device.

Claims20

Dependent claims

A computing system, comprising:

at least one computing device processor;
a memory device including instructions that, when executed by the at least one computing device processor, enables the computing system to:
maintain a data store in an electronic environment, the data store including information regarding a plurality of computing device assets connected to the computing system via a network;
receive a request to manage configuration deployments, the request comprising selection criteria;
identify, based at least in part on the selection criteria associated with the request, at least one computing asset in the plurality of computing device assets;
identify information in the data store associated with the at least one identified computing asset;
modify the identified information based at least in part on configuration requirements for at least one replicated asset to create modified asset identifying information;
generate at least one configuration file based at least in part on the modified asset identifying information;
and
configure the at least one replicated asset using the at least one configuration file, wherein at least a portion of the at least one replicated asset is a copy of the at least one identified computing asset.

7 more elements

A non-transitory computer readable storage medium storing instructions that, when executed by at least one processor of a computing system, causes the computing system to:

maintain a data store in an electronic environment, the data store including information regarding a plurality of computing device assets connected to the computing system via a network;
receive a request to manage configuration deployments, the request comprising selection criteria;
identify, based at least in part on the selection criteria associated with the request, at least one computing asset in the plurality of computing device assets;
identify information in the data store associated with the at least one identified computing asset;
modify the identified information based at least in part on configuration requirements for at least one replicated asset to create modified asset identifying information;
generate at least one configuration file based at least in part on the modified asset identifying information;
and
configure the at least one replicated asset using the at least one configuration file, wherein at least a portion of the at least one replicated asset is a copy of the at least one identified computing asset.

5 more elements

Dependencies are inferred from the claim text.

Honeypot asset cloning

Life of this patent

Honeypot asset cloning

Life of this patent

Abstract

Claims20